CentOS logo with wording. CentOS Installation

This installation guide has been tested with:
  • Suricata 3.1, 2.0.11 on CentOS 7
  • Suricata 3.1, 2.0.11 on Scientific Linux 7
  • Suricata 3.1, 2.0.11 on Fedora 23, Fedora 22
  • Suricata 3.1 on CentOS 6
  • Suricata 5.0 on CentOS 7

Pre-Installation Requirements

CentOS 6 Only: CentOS 6 requires the EPEL package repository:

yum install epel-release

Before you can build Suricata, run the following command to ensure that all dependencies are installed:

sudo yum -y install gcc libpcap-devel pcre-devel libyaml-devel file-devel \
  zlib-devel jansson-devel nss-devel libcap-ng-devel libnet-devel tar make \
  libnetfilter_queue-devel lua-devel PyYAML libmaxminddb-devel rustc cargo \


To download and build Suricata, enter the following:


tar -xvzf suricata-3.1.tar.gz

cd suricata-3.1

./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-nfqueue --enable-lua


sudo make install

sudo ldconfig

Auto setup

You can also use the available auto setup features of Suricata:


make install-conf

make install-conf
will do the regular "make install" and then it will automatically create/setup all the necessary directories and suricata.yaml for you.

make install-rules

make install-rules
will do the regular "make install" and then it will automatically download and set up the latest ruleset from Emerging Threats available for Suricata

make install-full

make install-full
will combine everything mentioned above (install-conf and install-rules) - and will present you with a ready to run (configured and set up) Suricata

Then continue on to Basic Setup.